curl 缓冲区错误漏洞

🗓️ 27 Jun 2022 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 1 Views

Curl buffer error vulnerability in versions 7.16.4 and later, including 7.83.1, due to cookie handling, enabling denial of service.

Reporter	Title	Published	Views	Family All 210
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libcurl may affect IBM Spectrum Copy Data Management (CVE-2022-32206, CVE-2022-32208)	7 Oct 202218:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a man-in-the-middle attack in cURL libcurl (CVE-2022-32208)	31 Mar 202316:58	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel, Golang Go, and cURL libcurl may affect IBM Spectrum Protect Plus	13 Dec 202219:27	–	ibm
IBM Security Bulletins	Security Bulletin: Execution Engine for Apache Hadoop is vulnerable to heap-based buffer overflow and remote attacker to bypass security restrictions	20 Feb 202503:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MaaS360 Cloud Extender Agent and Base Module uses libcurl with multiple known vulnerabilities (CVE-2022-32205, CVE-2022-32206, CVE-2022-32207, CVE-2022-32208)	6 Oct 202204:10	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.7 contains fixes for multiple security vulnerabilities.	15 Dec 202209:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to denial of service due to cURL libcurl ( CVE-2022-32208, CVE-2022-32206 )	29 Jul 202419:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	15 Apr 202502:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC	19 Jan 202320:14	–	ibm

Source	Link
hackerone	www.hackerone.com/reports/1590071
seclists	www.seclists.org/fulldisclosure/2022/Oct/41
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/
debian	www.debian.org/security/2022/dsa-5197
security	www.security.netapp.com/advisory/ntap-20220915-0003/
lists	www.lists.debian.org/debian-lts-announce/2022/08/msg00017.html
seclists	www.seclists.org/fulldisclosure/2022/Oct/28
support	www.support.apple.com/kb/HT213488
security	www.security.gentoo.org/glsa/202212-01
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2022071168

23 May 2026 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 24.3

CVSS 3.15.9

EPSS0.0016

SSVC

curl buffer error cookie handling denial of service vulnerability version 7.16.4 version 7.83.1